configure-ecc

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.70). This is a third-party GitHub repository from an unverified/unknown user; while it’s not a direct executable download, the installation workflow clones and copies files (including hooks/scripts) from that repo — which could contain malicious scripts or supply-chain malware, so treat as suspicious until the repo is audited.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill explicitly runs git clone https://github.com/Jamkris/everything-gemini-code.git at runtime to fetch repository content that is then installed/loaded as ECC skills/rules (which control agent prompts/behavior and include hooks/scripts), so the remote URL is a required runtime dependency that can directly control the agent.